Posted by Stefan Kanthak on Sep 11

Hi @ll,

part 31 (see <http://seclists.org/fulldisclosure/2015/Mar/92>)
showed how to execute arbitrary (rogue) executables planted as
– %SystemRoot%System32Write.exe,
– %SystemRoot%System32WinHelp.exe,
– %SystemRoot%System32RegEdit.exe,
– %SystemRoot%System32Explorer.exe
etc. instead of
– %SystemRoot%Write.exe,
– %SystemRoot%WinHelp.exe,
– %SystemRoot%RegEdit.exe,
– %SystemRoot%Explorer.exe
etc., including the possibility to…